CVE-2024-2728 MEDIUM

CVE-2024-2728: Information exposure vulnerability in the CIGESv2 system

Vendor Ciges

Product CIGESv2

Weakness CWE-200 · Info exposure

Published March 22, 2024

Last update August 1, 2024

View on NVD All CVEs

CVSS base score

4.1/10

Attack vector Physical

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the lack of proper implementation of the TLS protocol.

Key dates

02Disclosure timeline

March 22, 2024 CVE published

August 1, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-2728 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2025-65090 XWiki Full Calendar Macro vulnerable to data leak through Calendar.JSONService CVE-2024-13568 Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CVE-2022-32218 CVE-2026-2268 Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action CVE-2025-61906 Opencast's editor accidentally publishes videos/overwrites publications #1626